Privacy Policy

Last Updated: January 9, 2025

Your privacy is paramount to us. This Privacy Policy details how we collect, use, store, and protect your personal data when you use our services. It also outlines your rights regarding your data and how you can exercise them.

1. Information We Collect

We collect the following types of personal data to provide and improve our services:

Account Information: When you create an account, we collect your username, email address, and password.
Usage Data: We collect information about how you use our services, including the types of content you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
Uploaded Content: When you upload documents or other content through our website or API, we collect and process the content of those files to provide our services.
Communication Data: When you contact us for support or other inquiries, we collect the content of your communications, including any information you choose to provide.
Device and Connection Information: We may collect information about the computer, phone, or other device you use to access our services. This may include your IP address, browser type, operating system, device identifiers, and other technical information.
Cookies and Similar Technologies: We use cookies and similar technologies to collect information about your interactions with our website and services. Please see the "Cookies and Tracking Technologies" section below for more details.

We do not collect the following types of data:

Payment Information: We do not directly collect or store your payment card details. When you make a purchase or recharge your account, your payment information is processed securely by our third-party payment processor, Stripe. Stripe handles all the steps in the payment process on their secure servers, including the collection and processing of your card details.

2. How We Use Your Information

We use your personal data for the following purposes:

Providing the Service: To operate, maintain, and provide you with the features and functionality of our services, including processing your uploaded content, managing your tasks, and providing customer support.
Improving Our Offerings: To understand how our services are used, analyze trends, develop new features, and improve the overall user experience.
Communicating with You: To send you service-related communications, such as account notifications, security alerts, and updates. We may also send you promotional communications about our services, which you can opt out of at any time.
Processing Payments: To process your payments and manage your account balance.
Ensuring Security: To protect the security and integrity of our services, detect and prevent fraud, and enforce our terms of service.
Complying with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.

3. Data Storage and Security

We store your personal data on secure servers. We implement appropriate technical and organizational measures to protect your data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

Encryption: We encrypt sensitive data, such as passwords, both in transit and at rest.
Access Controls: We restrict access to your personal data to authorized personnel who need it to perform their job functions.
Regular Security Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
Data Minimization: We collect and retain only the minimum amount of personal data necessary to provide our services.
Incident Response Plan: We have an incident response plan in place to address any data breaches or security incidents promptly and effectively.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security of your data.

4. Data Sharing and Disclosure

We may share your personal data with third parties under the following circumstances:

Service Providers: We may share your data with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services and customer service. These service providers are contractually obligated to protect your data and use it only for the purposes for which it was disclosed.
Legal Compliance: We may disclose your data if required to do so by law or in response to a valid legal request, such as a subpoena, court order, or government investigation.
Protection of Rights: We may disclose your data if we believe it is necessary to protect our rights, property, or safety.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or other sale of all or a portion of our assets, your data may be transferred to the acquiring entity.
With Your Consent: We may share your data with third parties if we have obtained your consent to do so.

We do not sell your personal data to third parties.

5. Your Data Rights

You have the following rights regarding your personal data:

Right of Access: You have the right to request access to the personal data we hold about you and to receive a copy of that data.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you have withdrawn your consent.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.
Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used format.
Right to Object: You have the right to object to the processing of your personal data under certain circumstances, such as when the processing is based on our legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Information" section below. We will respond to your request within one month, unless we require an extension due to the complexity or number of requests.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information about your interactions with our website and services. Cookies are small text files that are stored on your device when you visit a website. They allow us to recognize your device and remember your preferences, such as your language settings or login information.

We use the following types of cookies:

Strictly Necessary Cookies: These cookies are essential for the operation of our website and services. They enable you to navigate the site, use its features, and access secure areas.
Performance Cookies: These cookies collect information about how you use our website, such as which pages you visit most often and if you encounter any errors. This information helps us improve the performance and usability of our site.
Functionality Cookies: These cookies allow our website to remember choices you make, such as your username or language preference, and provide enhanced, personalized features.
Targeting Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and measure the effectiveness of advertising campaigns.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect the functionality of our website and services.

7. International Data Transfers

Please be aware that your data may be transferred to, stored, and processed in the United States, Germany, Japan, Singapore, and Hong Kong, where our servers are located. The data protection laws may differ from those of your jurisdiction.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes, and enforcing our agreements. The specific retention period may vary depending on the type of data and the purpose of processing.

When your personal data is no longer needed, we will securely delete or anonymize it.

9. Contact Information

If you have any questions or concerns about our privacy practices or this Privacy Policy, or if you wish to exercise your data rights, please contact us at:

service@pinocch.com

We will do our best to address your inquiries and resolve any issues promptly.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will revise the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

If we make material changes to this Privacy Policy, we will notify you by email or through a prominent notice on our website before the changes take effect.